Plugins

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Signed chain-of-custody for sessions: every watched tool result appends a hash-chained, ed25519-signed record, with commits bound into the chain — tampering with any line or truncating the tail fails deterministic replay verification.

Persistent Bots and group rooms inside DSH. Each Bot keeps its own model, permission preset, workspace and session across restarts; a Bot can also be backed by an installed local agent CLI (Codex CLI, Claude Code, ACP agents) using that CLI's own login and models. Unaddressed messages can be triaged by the room leader, the room accumulates a shared experience card, and every answer is a run in a durable ledger the sidebar panel replays. New Bots default to the full-access permission (any command, any file; the form asks you to confirm the risk), so choose read-only or workspace-write to confine one; Codex CLI and Claude Code Bots at full access run without their own sandbox or permission prompts.

Publishes HTML pages and Markdown documents written by the agent to GitHub Pages as shareable links, with tools to update them in place, list, read back, and delete them; adds an Artifacts sidebar panel and a bundled page-design skill.

Code retrieval engine exposed as an MCP server: four tools (code_search, code_outline, code_index, index_status) over a SQLite FTS5 index with BM25 ranking, CJK bigram indexing, declaration-aware tree-sitter chunking, incremental reindexing, and a three-layer secret filter. The bigram index matches Chinese-language queries against English code, and the default path needs no vector store or embedding model. Requires a local Python 3.10-3.12 engine installed by scripts/install.sh, and CODERAG_ROOT set in the profile patch.

Keeps a per-turn receipt that later turns do not clear (final todo counts, goal id and phase, end reason, and a fail-closed pass/fail/inconclusive plan verdict), plus a read-only tool to read recent receipts. Stores counts and ids only.

Project-less chats for dsh: a session created without a workspace gets its own directory under ~/Documents/DSH/<date>/chat-NN, reused whenever the chat is reopened and left in Ungrouped rather than made a sidebar project; the new-session hero gains a hover clear badge and a "work without a project" row, and a client-only sentinel workspace keeps that hero and its composer usable.

基于 DeepSeek Harness 的 GitHub 插件静态安全审查预设，该项目代码由ai生成，主要框架由我搭建，通过“侦察员+审计员”双 Agent 协作、通过实验性ai自测攻防。主要功能有防死机上下文裁剪，有效防御投毒与提示词注入。包含21条安全红线、依赖树连坐排查与自动 YAML 校验，这是一名20岁非科班大学生的AI安全探索，欢迎大佬指导。本项目不能代替人工审计。请勿在生产环境或敏感凭证环境中使用。

Connects DSH to shared multi-agent rooms on roomcomm.xyz through a remote MCP server and a coordination skill.

Runs Superpowers as an agent preset and gives each skill its own subagent model from a Settings table, so TDD, debugging and verification no longer all inherit the parent model.

为短上下文窗口的对话提供更轻量的 Agent 预设，能降低78%的固定开销。由 Deepseek 制作

LESSONS.md (AI mistake notebook) visualizer panel for DeepSeek Harness Web UI — browse, search and review your AI mistake notebook entries by level and recurrence.

Role-based subagent delegation for DeepSeek Harness: one delegate tool over a folder of role files, with a roster that ships and stays overridable

Native headless and visible Chromium browser automation agent for DeepSeek Harness with DOM tree extraction, screenshot capture, and built-in SSRF protection.

Persistent long-term memory for DeepSeek Harness: a JSON store of typed entries (fact, preference, entity, rule, episodic) exposed as the memory_remember and memory_recall agent tools, with recall ranked by keyword overlap, importance and access frequency.

A headless-first macOS Computer Use driver for DeepSeek Harness with AX-first observations, window-bound multimodal evidence, host-owned approval, and evidence-backed action receipts

An Agent-safe context compressor for DeepSeek Harness. It semantically preserves critical tool outputs such as errors, file paths, JSON payloads and command results, instead of mechanically truncating the context.

Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.

Automatic tier-based model routing for DeepSeek Harness: a virtual `smart` model classifies each request by difficulty (hard / normal / easy) and by vision need, then delegates it to the models you already configured. 三级难度 + 视觉自动路由，虚拟 smart 模型零配置接入。

在 DeepSeek Harness 对话中以会话级 artifact 安全展示交互式 HTML 可视化。

Persistent, searchable, per-project memory for the DeepSeek Harness: decisions, rules, and sprint context in a queryable DuckDB file, rules enforced on every model request, with a full management UI in the Web Client

Xiaomi MiMo-powered voice for DeepSeek Harness: browser 🎤/🧠/🔊 UI, voice_transcribe/voice_understand/voice_speak tools, configurable voice map (preset/voicedesign/voiceclone). Fork of zhuiyueya/dsh-voice (MIT), Settings pattern from Anionex/dsh-vision-toolkit (MIT).

flykit for DeepSeek Harness — status line, file explorer with editor and live watch, and Claude Code / Pi / Codex terminals in the web GUI. Fly your agents.